Smart wallet developer Ambire has moved into hardware with Ice, a dedicated signing device built for Safe smart accounts. It works alongside Ambire's existing browser extension and mobile app and connects to Safe over USB, Bluetooth or QR out of the box.

The device decodes every Safe action on its own screen, including each step of a batch, and blocks handing Safe control to unknown code unless the target is on a short allowlist. A hardware switch cuts USB data and radio power, after which Ice signs only over animated QR codes. Firmware is built on Trezor's, keys are generated inside certified chips, and the case is fully transparent.

The first batch is limited to 200 devices at $119 instead of $159, reserved with a $10 deposit and expected to ship in 2-3 months.

Ambire positions Ice against blind signing, the failure behind the $1.4B Bybit hack in February 2025, when signers approved a Safe transaction their devices could not decode. Hardware and firmware are open source, board and case files are published for self-builds, and a post-quantum key can be added to a Safe once chains support it.